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MUSINGS ON Q(l/4): ARITHMETIC SPIN STRUCTURES ON 

ELLIPTIC CURVES 

KIRTI JOSHI 

Abstract. We introduce and study arithmetic spin structures on elliptic curves. 
We show that there is a unique isogeny class of elliptic curves over F p 2 which carries 
a unique arithmetic spin structure and provides a geometric object of weight 1/2 
in the sense of Deligne and Grothendieck. This object is thus a candidate for 
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1. Introduction and statement of the principal results 

1.1. The problem. In this paper we attempt to provide an intrinsic approach to 
the problem of constructing Q(l/4). We show that there is, up to isomorphism, a 
unique geometric object which lives over F p 2, and which is equipped with £-adic and 
p-adic realizations of weight 1/2 in the sense of [4] . This object is thus a candidate for 
Q(l/4). This object is constructed using what we call arithmetic spin structures on 
elliptic curves. Our approach to Q(l/4) may be considered to be a twisted analogue 
of the constructions of [8, 3]. We note that the problem of constructing "fractional 
motives" and "exotic" Tate motives has also been studied in [1, 9, 5, 11]. 

We say that an elliptic curve is of spinorial type if its algebra of endomorphisms 
(we consider endomorphisms defined over the field of definition of the curve) carries a 
non-trivial involution of the first kind (see 4.1). The classification of endomorphism 
algebras of elliptic curves shows that an elliptic curve is of spinorial type if and 
only if it is supersingular and its endomorphism algebra is a quaternion algebra (see 
Proposition 4.1.1). Thus a supersingular elliptic curve with all its endomorphisms 
defined over the ground field is of spinorial type; and every supersingular elliptic 
curve becomes of spinorial type over some quadratic extension. By the well-known 
classification of isogeny classes of elliptic curves over a finite field one sees that for 
a given finite field there are at most two isogeny classes of elliptic curves which are 
of spinorial type. 

Involutions of the first kind on an algebra are classified as orthogonal or symplectic 
depending on what they look like over any splitting field of the algebra. A spin 
structure (B, a) on an elliptic curve of spinorial type is a choice of an involution 
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a of the first kind and orthogonal type (i.e of an orthogonal involution-see 2.5) 
on the endomorphism algebra (denoted here by B) of the curve. On a quaternion 
algebra, orthogonal involutions of the first kind are classified (up to isomorphism) 
by their discriminant. Every spin structure comes equipped with a (even) Clifford 
algebra (see 2.10). In the present situation, because the quaternion algebra B of 
endomorphisms of a supersingular elliptic curve is ramified at infinity (and at p, the 
characteristic of ground field), the (even) Clifford algebras C + (B, a) which can arise 
are imaginary quadratic extensions of Q (see Theorem 6.2.1). 

1.2. The results over F p 2. We now describe the results we obtain over F p 2 (they 
are also proved here for F p 2n with n odd). We show (in Proposition 4.3.1) that 
the Frobenius endomorphism of E is a proper similitude of this spin structure, and 
the group of proper similitudes, denoted here by GO + (B,a), is the non-split torus 
(obtained by the restriction of scalars of G m from the Clifford algebra C + (B,o~) of 
the spin structure-see Proposition 3.1.3). The spin group (rather the general spin 
group) associated to (B, a) is again a non-split torus and is a cover of the group 
of similitudes (see 3.3). This allows us to speak of constructing square roots of the 
Frobenius endomorphism. A necessary and sufficient condition that Frobenius en- 
domorphism have a square root in the Clifford algebra is that the Clifford algebra 
of the spin structure is Q[x]/(a; 2 + p) (Theorem 5.3.1). This means that the involu- 
tion underlying the spin structure has discriminant — p; moreover as the Frobenius 
endomorphism is a central element operating by ±p, one sees that there are spin 
structures for which Frobenius does not have a square root. 

We show (see Theorem 6.2.1 and Corollary 6.2.3) that for an elliptic curve E/¥ p 2 of 
spinorial type, whose Frobenius endomorphism acts by multiplication by —p, carries 
a unique spin structure of discriminant — p (uniqueness is up to isomorphism). For 
this spin structure the Frobenius endomorphism admits square roots (±y/—p) in the 
Clifford algebra. This gives rise to a spinorial representation of the Weil group 

pf£ : W(¥ p2 /¥ p2 ) -> GSpin(£, a) 

(here B = End(E)) which lifts the canonical similitude representation 

p E>a :W(¥ P 2/¥ P 2) ^ GO + (B,a). 

This spinorial representation is of weight 1/2 in the sense that the absolute value of 
the eigenvalues of Frobenius is 

Vp=(p 2 ) 1/4 = (p 2 )^ )/2 - 

Spin structures for which the similitude representation admits a spinorial lifting 
are said to be arithmetic spin structures. Over ¥ p 2, arithmetic spin structures of 
discriminant — p can exists on elliptic curve of spinorial type if and only if the 
Frobenius endomorphism operates by — p; and a fortiori, there are no orthogonal 
involutions on the algebra B = End(E) with positive discriminant (where E is of 
spinorial type). So not all spin structures can exist or when they exist are arithmetic. 
The data (E, (B,o~)) consisting of elliptic curve E/¥ p 2 together with an arithmetic 
spin structure (B, a) on E is a geometric object whose weight is half: this our 
candidate for Q(l/4). There is exactly one isogeny class of elliptic curves over F p 2 
which provides such a structure and the spin structure is unique up to isomorphism. 
In 7.2 and 7.3 we construct the £-adic and the crystalline realizations of Q(l/4). We 
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note that the Clifford algebra of spin structures (arithmetic or not) are imaginary 
quadratic extensions of Q (and so are not isomorphic to Q x Q). 

In [11] one finds a formula for the values of the Hasse-Weil zeta function of a 
smooth, projective variety over ¥ p 2 at s = 1/2. It has been expected that this formula 
must have an arithmetic explanation in terms of a motive Z(l/2). As a consequence 
of our theory we prove a simple relation (see Theorem 7.6.1) between the L-function 
of the elliptic curve with an arithmetic spin structure and the associated spinorial 
representation. This is similar (in spirit) to the formula proved in [11]. 

The theory developed here should be viewed as a Q-theory rather than a Z- 
theory because we have worked throughout with the quaternion algebra (so up to 
isogeny). But for a Z-theory one should work with orders in the quaternion algebra, 
as endomorphism rings arise more naturally as orders) . We hope to return to this in 
later paper. The theory developed here can be also applied to rank two supersingular 
Drinfeld modules, but we will defer this to a subsequent paper as well. 

1.3. Acknowledgements. This paper grew out of a talk given by Ramachandran 
on [11]. We thank him for conversations and correspondence about [11]. Thanks 
are also due to Preeti Raman for conversations on Clifford groups and for help 
with identifying GSpin(Z?, a) in the case we need here. Thanks are also due to 
Dinesh Thakur for encouragement and for a careful reading of the manuscript. We 
would like to thank Christopher Deninger for comments and suggestions which have 
improved this manuscript. Some part of this work was carried out while the author 
was visiting the Tata Institute and the Universite Montpellier II and we thank both 
for their hospitality. 

2. Recollections from the theory of Clifford algebras 

2.1. Preparatory remarks. The fundamental reference for what we need here is 
[7]. Readers unfamiliar with the theory of Clifford algebras may first want to read 
[2] but should bear in mind that unlike [2] we will work with a twisted situation. 
All facts we need about Clifford algebras constructed from quaternion algebras with 
orthogonal involutions are found in [7]. The reader is advised to keep that work 
handy while reading the present paper. Since the machinery of twisted quadratic 
spaces may not be familiar to the readers we have, for the reader's convenience, 
inserted a "recurring example" which explains the machinery in the context we need 
to use for the main results of this paper. 

Throughout the paper F will denote a field of characteristic not equal to two (zero 
is allowed) . The results can probably be carried out in case the characteristic is two 
but the details are more complicated so we will leave them aside for the moment. 

2.2. Inner automorphisms. In what follows, we will work with finite dimensional 
algebras over a field F. Let A be a finite dimensional algebra over a field F. For an 
invertible u G A, we write int(w) : A — > A for the inner automorphism of A defined 
by u, given explicitly by mt(u)(a) = u o a o u" 1 for any a £ A. 

2.3. Involutions. Let F be a field of characteristic not equal to two. Let A/F be 
a finite dimensional algebra over F. An involution of the first kind on A is a map 
a : A —> A such that \/x, y G A, 

(1) a(x + y) = a(x) + a(y), 

(2) cr(xy) = a(y)a(x) (so a is an anti-morphism) 
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(3) a 2 (x) = X, 

(4) a is identity on the center of A. 

2.4. Classification of involutions. 

2.4.1. The split case. Let V be a finite dimensional vector space over a field extension 
K/F and let b : V x V — > K be a non-degenerate bilinear form with values in K. 
Then for any / G Endi<(V) we define er&(/) G Endi<(V) by the following property: 
for all v , w G V we have 

b(v,f(w)) = b(a b (f)(v),w). 

Then / H y cr b (f) is a i^-linear anti-automorphism of EndK(V), called the adjoint 
automorphism of Endx(V) with respect to the non-degenerate bilinear form b. The 
mapping b i— >■ a b is a bijection between the equivalence classes of non-degenerate 
bilinear forms on V up to scalar multiples and the set of i^-linear anti-automorphisms 
of Endx(V). Under this equivalence a b provides an involution (i.e. a i^-linear anti- 
automorphism of order two) if and only if b is symmetric or skew-symmetric. For a 
proof see [7, Page 1]. 

2.4.2. The general case. We now describe involutions a on arbitrary central simple 
algebras. Let (A, a) be a pair where A/F is a central simple algebra and a : A —y A 
is an involution. Let K/F be a splitting field of A/F. Then ok '■ A®pK — y A®pK 
is an involution of Ak and by the previous paragraph, we see that o~k arises from a 
non-singular bilinear form which is either symmetric or skew-symmetric. 

2.5. Orthogonal and symplectic involutions. Let (A, a) be a pair as above. 
We say that a is symplectic (resp. orthogonal) involution if for any splitting field 
K/F (and any isomorphism Ak — > Endx(V), the involution o~k of Ak arises from a 
non-degenerate skew-symmetric (resp. symmetric) bilinear form on V. 

2.6. Twisted quadratic spaces. Let F be a field (of characteristic not equal to 
two). A twisted quadratic space over F is a pair (A, a) where A/F is a central simple 
algebra over F and a : A — y A is an involution of first kind and of orthogonal type. 
Morphisms of twisted quadratic spaces are defined in the obvious way. 

2.7. Twisted quadratic spaces and quadratic spaces. If (A, a) is a twisted 
quadratic space over F and if A is split with A = Endp(V), then a = o~\> for a 
symmetric bilinear form b : V x V — > F and the pair (A, a) is isomorphic to the 
pair (Endp(V), a h ) and this is equivalent to the data (V, q b ) where q b : V — y F is the 
quadratic form associated to the symmetric bilinear form b. Thus in the split case 
the data of a twisted quadratic space is simply the data of a quadratic space. We 
note that the term "twisted quadratic space" was not introduced in [7] but clearly 
seems appropriate. 

2.8. Recurring Example. This example will recur throughout and is the case we 
want to consider for the main results of this paper. So we provide this along for the 
convenience of the reader. 

Let B/F be a quaternion algebra. Then B has a basis l,i,j,k with i 2 ,j 2 G F*, 

ij — k — —ji. If i 2 = a,j 2 = b we will write this algebra as B = ( ^r )• The map 
7 : B — y B given by sending 

7(x + ix\ + jx 2 + kx 3 ) = x - ix\ - jx 2 - kx 3 
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is the unique symplectic involution on B (see [7, Proposition 2.21, page 26]). 
Every orthogonal involution a on B is of the form 

a = int(w) o 7 

where 7(14) = — u and u G B* is uniquely determined up to a scalar in F* by er (see 
[7, Proposition 2.21, page 26]). 

By [7, Corollary 2.8 (page 18) and Proposition 2.21 (page 26)] every quaternion 
algebra B/F carries both symplectic and orthogonal involutions. The reduced norm 
of u G B is given Nrd(-u) = wy(u), the reduced trace of u G B is given by Trd(-u) = 
u + 7(14). Observe that u has reduced trace zero if and only if j(u) = —u (i.e., u is 
a "pure quaternion"). 

2.9. Discriminants. 

2.9.1. The split case. We first describe the discriminant of a quadratic space. Let 
(V, q) be a non-degenerate quadratic space over F. Let b be the associated bilinear 
form. For a basis ei,...,e n of V, the matrix det(6(e*, e,-)) 7^ and its class in 
F*/F* 2 is independent of the choice of the basis e±, . . . ,e n of V. We denote this 
class in F*/F* 2 by disc(6). The discriminant of (V,q) is the class 

disc(V,q) = disc(g) = (-l) 26 ^ det(6) G F*/F* 2 . 

2.9.2. T/ie general case. For an even degree central simple algebra A and any or- 
thogonal involution a, we define the determinant 

det(cr) = Nrd A (a) G F*/F* 2 , 

for any element a & A* such that cr(a) = —a. This class is again independent of the 
choice of such an a. The discriminant of a is given by 

disc(a) = (-l)^ 1 det(a) G F*/F* 2 . 

If <t = int(w) o 7 then 

disc(a) = -Nrd^w) G F*/F* 2 . 

For a proof see [7, Page 81, Proposition 7.3(2)]. We note that the sign given in that 
reference is not correct (ours is correct) as can be easily seen from the proof given 
on [7, Pages 81-82, Proposition 7.3]. 

Moreover if A is a quaternion division algebra then A does not carry any orthog- 
onal involutions with trivial discriminant (see [7, page 82, Example 7.4]). 

2.10. Clifford Algebra associated to a twisted quadratic space (A, a). Let 

(A, a) be a twisted quadratic space. Then there exits a (even) Clifford algebra 
denoted by C + (A, er) which is functorial in the pair and if A = End(V) for a vector 
space V/F, then C + (A,a) agrees with the even Clifford algebra constructed in the 
usual manner. See [7, page 91]. 
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2.11. The center of the Clifford algebra. Let us assume from now on that (A, a) 
is a twisted quadratic space over F with deg(A) = 2m, m > 1. The main case of 
interest to us will be the case m — 1, though we will not assume this preferring to 
work out the general theory instead and specializing when we need to do so. 

The center Z(A,a) of C + (A,cr) is an etale (=separable) quadratic F-algebra. If 
Z is a field, then C + (A, a) is a central simple algebra of degree 2 m ~ 1 over Z; if 
Z = F x F, then C + (A,o~) is a direct product of two copies of central simple F- 
algebras of degree 2 m_1 . Moreover the center Z of C + (A, a) is given by the following 
recipe (see [7, Theorem 8.10, page 94]). 

Theorem 2.11.1. Let {A, a) be a twisted quadratic space over F. Let C + (A,o~) be 
the associated even Clifford algebra. Let Z = Z(A,a) C C + (A,a) be its center. If 
the characteristic of F is not two, then Z = F[X]/(X 2 — 5 a ) where 8 ff G F* is a 
representative of the discriminant of a, disc(a) G F*/F* 2 . 

Corollary 2.11.2. Let B/F be a quaternion algebra and a be an orthogonal in- 
volution on B. Then the even Clifford algebra C + (B,a) is commutative and we 
have 

C + (B,a) = Z = F[X}/(X 2 -5 a ), 
where 8 a = disc(o~) mod F* 2 . 

2.12. Similitudes and the group of similitudes. Let (A, a) be a twisted qua- 
dratic space over F as before. We study several groups which arise in the present 
context. 

A similitude of (A, a) is an element g G A such that c{g)g G F* . Then fi(g) = 
c{g)g is called the multiplier of the similitude g of (A, a). Similitudes of (A, a) form 
a subgroup of A* which we denote by GO (A, a). We have a homomorphism \x : 
GO(A,a) -> F* given by g ^ fi(g) = a(g)g. We define PGO(A,a) = GO(A,a)/F* 
and we have the exact sequence 

1 -)■ F* -)■ GO(A, a) -► PGO(A, a) -)■ 1. 

Similitudes g G GO(A, cr) with /i((?) = 1 are called isometries and we have a 
subgroup 0(A,a) = ker(yu) C GO(A, a) of isometries of (A, a). We have an exact 
sequence of algebraic groups 

1 -> 0(A, a) -> GO(A, <t) ->■ G m -»■ 1. 

2.13. Recurring Example. Let {B,a) be a twisted quadratic space over F with 
.B a quaternion division algebra (see 2.8). Let a = int(w) o 7 where u G B* is a 
pure quaternion (so 7(w) = — w) and 7 the canonical symplectic involution. Then 
GO (A, a) = F(u)*UF(u)*v where v is an invertible quaternion which anti-commutes 
with u (i.e. uv = —vu). 

2.14. Proper similitudes. Let deg(A) — n — 2m. For every g G GO (A, a) we have 
Nrd^g) = ±/z(g) m , where Nrd(^) is the reduced norm of g. We say that g is a proper 
similitude of (A, <r) if NrdA(g) = n(g) m - The set of proper similitudes of (A, a) is a 
subgroup of GO (A, a) denoted by GO + (A, a). We let PGO + (A, a) = GO+(A, a)/F* 
and + (A, a) = GO + (A, o~)nO(A, a) be the subgroup of proper isometries of (A, a). 
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2.15. Recurring Example. Let (B,a) be a twisted quadratic space, with B/F 
a quaternion division algebra (see 2.8, 2.13). Suppose that a = int(-u) o 7, let 
Nf{u)/f '■ F(u)* — > F* be the norm map. Then we have 

GO + (B,a) =F(u)*, 

and + (B,a) = 0(B,a) = {z e F(u)\N F(u)/F (z) = 1} if B is not split. 

2.16. The Clifford Group. In the twisted quadratic case, there is a Special Clifford 
group but not the Clifford group and we recall this now. 

Let (A, a) be a twisted quadratic space over a field F. We have associated to 
(A, a) a subgroup T + (A,a) C C + (A,a)* of the group of units of the even Clifford 
algebra associated to the pair (A, a). If (A, a) is split then T + (A, a) can be identified 
with the special Clifford group of [2]. 

We caution the reader that we use the notation T + (A, a) instead of T(A, a) used 
in [7] because in the split case we get the special Clifford group using the above 
construction (and not the Clifford group which we note, is denoted by T(V,q), in 
[2] while the special Clifford group is denoted by T + {V,q)). It seems to the author 
that it is better to follow established conventions of the theory in split case for 
psychological reasons. 

We have an exact sequence of groups 

(2.16.1) 1 ->■ F* -»■ T + (A, a) -»■ + (A, a) ->■ 1 

2.17. Recurring Example. Let (B,a) be a twisted quadratic space, with B/F a 
quaternion division algebra (see 2.8, 2.13, 2.15), and suppose that a = int(-u) o 7. 
Let F(-u) 1 be the subgroup 

(2.17.1) F(uY = {ze F{u) : 27(3) = 1} 
Then we have and isomorphism of F-algebras 

C + (B,a)=F(u), 
and the group + (B, a) is given by 

(2.17.2) + (A,a) = F(u)\ 

while the special Clifford group T + (B,a) can be identified with 

T + (B,a) = C + (B,a)* = F(u)*. 
We have an exact sequence of groups 

(2.17.3) 1 ->• F* ->• T + (B, a) ->• + (B, a) ->■ 1. 

3. The groups GSpin and Spin 

3.1. The group of proper similitudes. From now on we will exclusively work 
with quaternion algebras over a field F. In other words A has deg(A) = 2. Let 
(A, a) be a twisted quadratic space over a field F with A a quaternion algebra. We 
will assume that F is not of characteristic two for simplicity. Then we have a group 
GO + (A,a). In the following subsections we will construct a group, which we will 
denote by GSpin(A, a) which bears a relation to GO + (A,a) similar to the relation 
the usual Spin group bears to the special orthogonal group. 
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Let G m /F be the multiplicative group over F. If K/F is a finite extension we will 
write Rk/f^tti for torus obtained by the restriction of scalars. Let N K / F : K — >■ F 
be the norm map. We have an induced map N K / F : R K / F G m — ¥ G m and let 

(3.1.1) G lnK/F = Ker(iV^ /F : R K/F G m -¥ G m ) 

be its kernel. This is a group scheme whose group of F-rational points, 

G 1 mK/F (F) = {xeK*\N K/F {x) = l}, 

is the subgroup of K* consisting of norm one elements in K. Similarly define the 
group scheme 

(3.1.2) fj} K/F = Ker(N K/F : R K / F fx 2 -> IMi)- 

Proposition 3.1.3. Let (A, a) be a twisted quadratic space over a field F and assume 
that A is a quaternion algebra. Let K = C + (A, a). Then the group scheme of proper 
similitudes and the group scheme of proper isometries are given by 

GO + {A,o~) = R K/F G m . 

+ (A,a) = G l mK/F 

For a proof see [7, Example 12.2.5, page 164]. 

3.2. Spin groups in the split case. Let us recall a few standard facts from the 
theory of spin groups. Let us assume that (V, q) be a quadratic space over F with 
q an isotropic form and assume that dim(y) = 2. In this case we have groups 
SO(q) = SO{2) = G m . The Clifford algebra construction yields a spin group as well. 
This situation is degenerate from the classical point of view (because 5*0(2) = G m ). 
We have Spin(2) = G m and we also have an exact sequence of algebraic groups. 

(3.2.1) 1 -> [i2 -> Spin(2) ->■ S0(2) ->■ 1 
This is none other than the Kummer sequence: 

(3.2.2) 1 ->■ [i 2 ->• <G m ->• G m -»■ 1. 

We have in particular an exact sequence (a part of the Galois cohomology sequence 
for the Kummer sequence): 

(3.2.3) 1 ->■ [i{F) -> F* ->■ F* -»■ F*/F* 2 . 

The connecting homomorphism F* — >■ F*/F* 2 is the Spinor norm homomorphism 
SO(2)(F) -*F*/F* 2 . 

3.3. The group GSpin. We now want to describe a similar story for GO + (B,a) 
when B is a quaternion algebra over F. For notational simplicity, let K = C + (B, a) 
be the Clifford algebra associated to the twisted quadratic space (B,o~). Then 
dim F (K) = 2. We have a canonical exact sequence of algebraic groups (obtained by 
restriction of scalars): 

(3.3.1) 1 — > Rk/f^2 -^ Rx/F^m — > R K / F G m —?■ 1. 

Let (B, a) be a twisted quadratic space with B a quaternion algebra. We define 
GSpin(5,o") as follows 

(3.3.2) GSpin( J B, a) = R K/F G m . 
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And we define the spin group Spin(5, er) by 

(3.3.3) Spin(S, a) = G 
Thus we have the commutative diagram: 

(3.3.4) 1 ^ Rk/f^2 - Rk/fG 



i 

mK/F- 



1 > Rk/fH2 ^ GSpin( J B, cr) 

And we have a commutative diagram of groups 



(3.3.5) 



^2K/F 



Spin(_B, er) 



>■ RK/F^m s- 1 

GO + (B,a) -1 

~0+(B,a) -1 



Rk/f^2 >■ GSpin(£>, a) 



GO + (B,a) 



Thus we have proved that 



Proposition 3.3.6. Let F be a field and (B, a) be a twisted quadratic space over 
F with B a quaternion algebra over F. Let K = C + (B,a) be the (even) Clifford 
algebra of (B, a). Then there is a canonical isogeny GSpin(5, a) — > GO + (i?, a) with 
kernel Rk/f^2- We have a commutative diagram of algebraic groups: 



(3.3.7) 



V2K/F 



Spin(£>, a) 



0+(B,a) 



1 ^ Rk/f^2 - GSpin(5, a) > GO + (B, a) - 1 

4. Spin structures on an elliptic curve 

4.1. Elliptic curves of spinorial type. Let A; be a field and let k be its algebraic 
closure. Let E/k be an elliptic curve. We will write End(E) = Homk(E, E) for the 
Q- algebra endomorphisms of E defined over k. We will say that E is of spinorial 
type if the Q-algebra Endk(E) admits a non-trivial involution of the first kind. 

Proposition 4.1.1. Let E/k be an elliptic curve over a field k. Consider the fol- 
lowing assertions: 

(1) E is of spinorial type. 

(2) Endk(E) = Endg(E) is a quaternion algebra. 

(3) E is supersingular. 

(4) The characteristic of k is p > 0. 
Then we have (1) <£> (2) => (3) => (4). 

Proof. Clearly the assertions (2) =>- (3) =>• (4) are well-known. So we need to prove 
the equivalence (1) <^> (2). 

Let B = Endk(E). We prove (1) =>• (2). By the classification of the endomorphism 
algebras of E there are three possibilities: B is either (a) the field of rational num- 
bers (b) an imaginary quadratic field or (c) a quaternion algebra. If B — Q, then B 
does not admit any non-trivial involutions. Similarly if B is an imaginary quadratic 
field then B does not admit any non-trivial involutions of the first kind (i.e., invo- 
lutions trivial on its center). Hence B cannot be the field of rational numbers or 
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an imaginary quadratic field. So the hypothesis (1) implies that B is a quaternion 
algebra. 

Now to prove (2) =>- (1) we use [7, Corollary 2.8 (page 18) and Proposition 2.21 
(page 26)] which says that any quaternion algebra B/Q admits non-trivial involu- 
tions of the first kind. So E is of spinorial type. This completes the proof. □ 

4.2. Elliptic curves of spinorial type over finite fields. From now on we will 

study elliptic curves of spinorial type over a finite field ¥ q with q = p n elements. 
Before proceeding further we recall the classification up to isogeny of elliptic curves 
over a finite field ¥ q (see [6] or [12, Theorem 4.1]). 

Theorem 4.2.1. Let ¥ q be a field with q = p a elements. The set of isogeny classes 
of elliptic curves over ¥ q are in bijection with a certain set of integers, denoted I q , 
contained in the interval [—2y/q, 2y / g] . An integer (3 G [—2y/q, 2^fq\ is in I q if and 
only if: 

(1) (ftp) = 1; or 

(2) p\(3 and we are in any of the following subcases: 

(a) a is even and (3 = ±2^/q; 

(b) a is even and p ^ 1 mod 3 and (3 = ±^fq; 

(c) a is odd and p = 2, 3 and (3 = ±p^~ ; 

(d) a is odd and (3 = 0; 

(e) a is even and p ^ 1 mod 4 and (3 = 0. 

In case (1) the associated isogeny class consists of ordinary elliptic curves. Otherwise 
the associated isogeny class consists of supersingular elliptic curves. In all cases, 
except in the case 2(a), the endomorphism algebra EndF q (E) of any elliptic curve 
E in the isogeny class associated to (3 is an imaginary quadratic field. If we are in 
the exceptional case 2(a) then the endomorphism algebra is the unique quaternion 
algebra over Q which is ramified at p and oo. 



Proposition 4.2.2. Let E/¥ q be a supersingular elliptic curve. Then E x ¥q ¥ q 2 is 
of spinorial type. 

Proof. If E is a supersingular elliptic curve defined over ¥ q then E' = E Xf q ¥ q 2 is 
a supersingular elliptic curve over ¥ q 2 with all its endomorphisms defined over F g 2. 
Hence E' is of spinorial type by the previous proposition. □ 

We end the subsection with the following consequence of Proposition 4.2.1 and 
Proposition 4.1.1. 

Proposition 4.2.3. Let E/¥ q be an elliptic curve of spinorial type. Then 

(1) E is supersingular, 

(2) The two eigenvalues of the Frobenius endomorphism of E are equal; 

(3) Frobenius endomorphism te '. E — >■ E is in the center of B = Endp (E). 

Proof. This is immediate from Deuring's classification of supersingular elliptic curves 
(see Theorem 4.2.1). □ 

4.3. Spin structures on an elliptic curve. Let E/¥ q be an elliptic curve over a 
finite field ¥ q . Assume that E is an elliptic curve of spinorial type. Let B = End(E) 
be the endomorphism algebra of E. A spin structure on E is a choice of an involution 
a : B — > B of first kind and orthogonal type. Equivalently, a spin structure on an 
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elliptic curve is a choice of twisted quadratic space structure (B, a) on B where 
B = End(E) and a : B — > B is an involution of the first kind and orthogonal type. 

Proposition 4.3.1. Let E/¥ q be an elliptic curve and suppose E is an elliptic curve 
with a spin structure (B, a). Then the Frobenius endomorphism te '. E — >■ E induces 
a similitude of (B, a). 

Proof. Let E be an elliptic curve with a spin structure (B,a). Then the Frobenius 
endomorphism te '■ E — > E is in the center of B. The center of B is Q. We 
have to prove that ct(t)t G Q. But r is in the center of B, so cr(r) = r and so 
o-{t)t = r 2 6 Q as r G Q. So r is a similitude of (B, a). To prove that r is a proper 
similitude we have to prove that the multiplier fi(r) = o~(t)t of the similitude r 
satisfies, 

fx{r) = cf{t)t = Nrd(r) = q. 

The last equality follows from the fact that r operates by ±y/q (or by the following 
proposition, see [10, Page 82]). This proves the assertion. □ 

Proposition 4.3.2. Let E/¥ q be an elliptic curve of spinorial type. Let r G End(E) 
be the Frobenius endomorphism of E. Then we have 

(1) The reduced trace of t is ±2y/q, 

(2) the reduced norm of r is q. 

In particular, the reduced norm is a square. 

Proposition 4.3.3. Let (B,a)/Q be a twisted quadratic space with B a quaternion 
algebra over Q which is ramified at oo. Let K = C + (B,a) be the associated even 
Clifford algebra. Then K/Q is an imaginary quadratic extension ofQ. 

Proof. The algebra B is given by its symbol B — [%■)■ Since B is ramified at oo, 

we see that the Hilbert symbol (a, 6)oo = — 1 and this means that a < and b < 0. 
Now let a be an orthogonal involution on B and let 7 be the canonical symplectic 
involution of B. Then a is of the form a = int(w) 07 for some u G B with 7(11) = —u. 
Thus u is a pure quaternion and disc(cr) = — Nrd(-u). But a simple calculation shows 
that 

Nrd(-u) = — au\ — bu\ + abu^, 

where u = iu\ + JU2 + ku^ and i 2 = a,j 2 = b, ij = —ji = k. Since a < and b < 0, 
we see that the quadratic form (—a, —b, ab) is positive definite. Hence Nrd(w) > 
and in particular disc(o") = — Nrd(-u) < 0. By Theorem 2.11.2 we know that in this 
case K = C + (B,a) = Q[x]/(x 2 — disc(cr)) and as disc(a) < 0, K is an imaginary 
quadratic extension of Q. This completes the proof. □ 

5. Spinorial representation of the Weil group 

5.1. Weil groups. Let E/¥ q be an elliptic curve. Let _W(¥ q /¥ q ) C Gal(f,/F g ) 
be the Weil group of ¥ q . It is standard that Z ~ W(¥ q /¥ q ) and we choose the 
isomorphism given by 1 (->■ Frob ffeom , where Frob 9eom G Gal(F q /¥ q ) is the geometric 
Frobenius of ¥ q . Proposition 4.3.1 provides a canonical representation of the Weil 
group arising from (E, (B,a)): 

Proposition 5.1.1. Let E be an elliptic curve with a spin structure (B,o~). Then 
there is a canonical similitude representation 

(5.1.2) p E ,„ : W(¥ q /¥ q ) -* GO + (B,a), 
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which is given by 

p E A^ob geom ) = (r,r) G GO + (B,a)(K) = R K/Q G m (K) = K* x K*. 

5.2. Spinorial liftings. Let p : W(¥ q /¥ q ) — > GO + (B,a) be a homomorphism of 
groups. We say that p admits a spinorial lifting if there exists a representation 
p' : W(¥ q /¥ q ) — > GSpin(5, a) which makes the following diagram commutative: 

(5.2.1) GSpin(B,a) 



W(¥ q /¥ q )^GO + (B,a) 
5.3. A criterion for existence of Spinorial liftings. 

Theorem 5.3.1. Let E/¥ q be an elliptic curve with a spin structure (B,o~). Let 
K = C + (B,a) be the associated even Clifford algebra. Let te = T G End(E) be the 
Frobenius endomorphism of E. Then a lift p s ^ n : W(¥ q /¥ q ) — > GSpin(5,a") exists 
if and only if the Clifford algebra K = K(B, o~) satisfies K = F(a/t). 

Proof. The endomorphism r G End(E) = B is a central element in B with reduced 
norm Nrd(r) = q. So by Theorem 4.2.1 r = ±y/g. We have an exact sequence of 
groups obtained by taking Galois cohomology of (3.3.1) with Gq = Gal(Q/Q), we 
get (for the Galois cohomology computations, which are easy, the unfamiliar reader 
may use [7, Lemma 29.6, page 394]): 

(5.3.2) 1 ->■ p 2 (K) ^K*^K*^ K*/K* 2 = H\G Q , R K /qM)- 

Then r G GO + (B,o-) lifts to GSpin(5, a) if and only if its image in K*/K* 2 is 1. 
Equivalently a lifting exists if and only if y/r G K. When this happens, we have a 
lift 

p spin . w(¥ q /¥ q ) -)• GSpm(B,a), 

given by 

p spm (Frob, eom ) = (y/r, -y/r) G GSpin(B, a)(K) = K* x K*. 

This prove the proposition. D 

6. Arithmetic spin structures 

6.1. Definition of Arithmetic spin structures. Let E/¥ q be an elliptic curve 
with a spin structure (B,a). We say that the spin structure (B,o~) is an arith- 
metic spin structure if the canonical similitude representation pE, ff : W{¥ q /¥ q ) — > 
GO + (B,cr) admits a spinorial lifting. 

6.2. Existence of an arithmetic spin structure. We now show that arithmetic 
spin structures exists on an elliptic curve under suitable circumstances. 

Theorem 6.2.1. Let E/¥ q be an elliptic curve of spinorial type with q = p 2n . Let 
B = End(E) and let r G B be the Frobenius endomorphism of E. Then we have the 
following: 

(1) if 'n is odd then there exists a unique arithmetic spin structure of discriminant 
—p n on E/¥ q if and only if ' t G End(E) is given by multiplication by —p n . 

(2) if n is even, then there exists an arithmetic spin structure of E if and only 
if B contains a pure quaternion with reduced norm 1 . 
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Proof. We prove (1). If E carries an arithmetic spin structure a of discriminant 
-p n , then by Theorem 5.3.1 we see that r 2 G C + (B,a) and Q(y/r) = C + {B,a) = 
Q[x]/(x 2 + p n ) thus r = —p n . So we have to prove the converse. 

To produce an arithmetic spin structure we have to prove the existence of a spin 
structure (B, a) on E/¥ q such that the canonical similitude representation 

p E:<T :W(¥ q /¥ q )^GO + (B,a) 

lifts to a spin representation. By Theorem 5.3.1, this happens if and only if r = 
±p n G K* 2 . By Proposition 4.3.3 we know that the discriminants of involutions 
which can occur as spin structures are all negative. So we see that there is no 
orthogonal involution on B whose discriminant can be +p n . So it remains to show 
that there is an involution o whose discriminant is — p n . To construct an involution 
of the first kind and of orthogonal type on B with discriminant — p n it suffices to 
construct a pure quaternion u G B (i.e. a quaternion with reduced trace zero) with 
reduced norm Nrd(w) = p n . Indeed given such a u, the discriminant of the involution 
a = int(-u) o 7 is given by (see 2.9) 

disc(o-) = — Nrd(w) = — p n . 

Thus we see that the even Clifford algebra C + (B, a) is C + (B, a) = K = Q[x]/(x 2 + 
p n ). Further orthogonal involutions on B are classified, up to isomorphism, by their 
discriminants (by [7, 7.4, Page 82] any two orthogonal involutions differ by an inner 
conjugation by a non-zero quaternion). So the spin structure (B, a) is unique up to 
isomorphism and is arithmetic. 

So let us construct the required u. We claim now that there exists a quaternion 
u G B of trace zero, with reduced norm p n , for any odd value of n. Indeed it is easy 

to see that B can be given by symbols ( ~ a <k~ p ) for a suitable choice of a and so B 

contains a trace zero quaternion v such that v 2 = —p. The reduced norm of v is 
Nrd(f ) = p and hence the quaternion u = p( n_1 )/ 2 t> has reduced norm p n . Thus the 
involution a = int(-u) o 7 has discriminant 

disc(o-) = — Nrd(-u) = — p n 

as claimed. Thus the Clifford algebra K = Q[x]/(x 2 +p n ), and so y/—p n G K and 
so we see that if E is such that r = — p n , then r has a square root in K and so we 
have a lifting 

(6.2.2) pf; : W(¥ q /¥ q ) -► GSpin(3, a) 

given by 

p|; n (Frob) = (v^, -Vr) e GO + (B, a){K) = K*xK*. 

Now we prove (2). If n is even, then r = — p n has a square root in K if and only 
if \f— 1 G K. So the existence of an involution with this property is tantamount 
to finding a pure quaternion v whose reduced norm is 1. If we can find such a v, 
then we can take u = p n ' 2 v and observe that u has reduced norm Nrd(w) = p n . 
Hence a = int(-u) o 7 is an orthogonal involution of the first kind with discriminant 
disc(cr) = — p n and r = — p n has a square root in K = Q[x]/(x 2 + p n ) = Q(i). □ 

Corollary 6.2.3. Let E/¥ p 2 of spinorial type. Then E carries an arithmetic spin 
structure if and only if the Frobenius endomorphism of E operates by multiplication 
by —p. If E has an arithmetic spin structure, then it is unique up to isomorphism. 
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7. A CANDIDATE FOR Q(l/4) 

7.1. Definition of Q(l/4). Let E/¥ p 2 be an elliptic curve with an arithmetic spin 
structure. We will define Q(l/4) to be the triple (E, (B,a)) where E is our elliptic 
curve and B = End(E) and (B, a) is the arithmetic spin structure on E. We show 
now that Q(l/4) is equipped with an £-adic (for £ ^ p) and a crystalline realization 

at p. 

7.2. The £-adic realization of Q(l/4). The object Q(l/4) comes equipped with 
an £-adic realization, denoted Q(l/4)^. We define the £-adic realization Q(l/4)^ of 
Q(l/4) to be the representation obtained by extension of scalars of the canonical 
spin representation p S g™ — > GSpin(£>, a). This gives us a Weil sheaf (by [4] such 
a sheaf is specified by specifying a representation of the Weil group) on the point 
Spec(F p2 ): 

(7.2.1) pf^ t : W(¥ P ,/¥ P 2) -> R K/Q G m (Qi) = GSpin(5, a)(Q e ). 

7.3. The crystalline realization of Q(l/4). Let (E,(B,a)) be an elliptic curve 
over F p 2n with an arithmetic spin structure (B, a). Let W = W(¥ p 2 n ) be the ring 
of Witt vectors of ¥ p 2n. Let F : W — > W be the Frobenius morphism of W. Let 
K = W <g> Q p be the quotient field of W and let F : K — >• K be the extension of 
F to Kq. Let H^ ris (E/W) be the crystalline cohomology of E; we have an F-linear 
map : H\ ris {E jW) -)■ H^E/W). The data {H l cris {E /W), 0) is the data of an 
F-crystal associated to E/¥ p 2 n . Let (M, 0) denote the extension of the F-crystal 
{Hl ris {E/W), 0) to an F-isocrystal over K ; since E has an arithmetic spin structure, 
the F-linear map : M — > M is simply the map = —p n F. We want to construct a 
crystal (M spm , <fi s P in ) which we would like to call the crystalline realization of Q(l/4). 
The endomorphism algebra of (M, 0) is the unique quaternion algebra B ® Q p over 
Q p . The orthogonal involution cr : B — > Z? extends to an orthogonal involution 
Op : B ® Q p — )■ 5 ® Qp. The data (M, 0, <Tp) is an F-isocrystal equipped with a spin 
structure (in the obvious sense). The Clifford algebra C + (M, 0, a p ) is a Q p vector 
space isomorphic to Qp[a;]/(x 2 +p n ). Define M spm = C + (M, 0, a p ), and define spm 
to be multiplication by x G Q p [x]/(x 2 +p n ) thought of as an F-linear endomorphism 
of M spin . This gives us a Dieudonne isocrystal (M spm , s P m ) over Q p which we call 
the crystalline realization of Q(l/4) and denote it by Q(l/4) p . 

7.4. The L-function of p S g™ . Let E/¥ q be an elliptic curve with an arithmetic 
spin structure (B,a). Then q = p 2n and the Frobenius endomorphism of E operates 
by — p n = —^; the eigenvalues of Frobenius under the spin representation p s ^ are 
±\ / — p n = ±y/—y/q. Thus the Hasse-Weil zeta function of pg*™ is given by 

(7.4.1) Z(p s ^,T) = (1 _^__ T)(1 + ^__ T) . 

We will write 

(7.4.2) L(p s E ^,s) = Z(p s £™, q - s ). 
And this is 

(7.4.3) L(pfj, 8 ) 



(l + ? 



5-2^ 



spin \ 
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We note that (7.4.3) can also be written more suggestively as 
(7.4.4) L(p s £™ * 1 

(7.4.5) 

(7.4.6) 



(l + ql 



1 



(l + ? 



2(\s) 



1 + V-iq^ s ) (l- v-ig 

especially the last equality which makes the 1/4-twisting more transparent. Note 
that the presence of the two factors in the last equality should be seen as a mani- 
festation of the fact that the Clifford algebra C + (B,o~) is a quadratic extension of 

Q. 

7.5. The L-function of H 1 ^). Since the Frobenius endomorphism of E operates 
by —y/q, we can also calculate the L-function E, that is the reciprocal of the char- 
acteristic polynomial of Frobenius on H 1 (E,Qi). The characteristic polynomial is 
given by 

(7.5.1) Z(H 1 (E),T) = (1 + V ^T) 2 . 
The L-function of E is defined as 

(7.5.2) L(E,s) = Z(H 1 (E),q- s r 1 - ' 



(l + ? 



2 



7.6. A relation between L{p s ^,s) and L{H\E), s). From (7.4.3) and (7.5.1) 
we have the relation: 



Theorem 7.6.1. For an elliptic curve E/¥ q with an arithmetic spin structure (B, a) 
and spinorial representation p s £™ : W(¥ q /¥ q ) — > GSpin(_B, a), we have 

2. 



L(E, s)=L (pfj, 



In particular we have 



L(E.l) = L( P ^: 1 ^ 
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